$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/cb4b5ee6-bc08-3d60-919a-88f792c7b5e7.roa File: cb4b5ee6-bc08-3d60-919a-88f792c7b5e7.roa (raw, json) Hash identifier: Jc/GaLtg1HeGOwntLGsGjor+JVCDMWD3CgrT07OGcIo= Subject key identifier: F7:A5:9D:84:0C:BF:C1:63:FF:BB:2C:ED:BB:D6:C5:11:DE:91:BD:D8 Certificate issuer: /CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f Certificate serial: 010D0C9F43285847B10165CD64FCD9DF80DECFC0 Authority key identifier: 3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/cb4b5ee6-bc08-3d60-919a-88f792c7b5e7.roa Signing time: Mon 28 Oct 2024 13:00:40 +0000 ROA not before: Mon 28 Oct 2024 13:00:40 +0000 ROA not after: Sun 26 Jan 2025 14:00:40 +0000 asID: 209242 IP address blocks: 23.145.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b1:01:65:cd:64:fc:d9:df:80:de:cf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f Validity Not Before: Oct 28 13:00:40 2024 GMT Not After : Jan 26 14:00:40 2025 GMT Subject: CN=b385783c-7b22-493b-a02e-90ac4a493150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f2:a1:68:d0:22:1f:21:27:24:7d:04:62:02: ab:78:e1:4d:59:e0:f0:fd:85:15:e6:c4:9a:81:60: bf:4d:0f:57:80:f0:74:35:b3:f3:62:f4:cd:14:78: d5:33:54:fd:08:94:92:f3:21:b7:71:c4:bb:5b:6b: 07:dd:b0:0b:fe:db:85:13:ed:d2:ab:82:86:ef:ba: df:ac:0c:e1:75:2d:15:48:9c:6b:db:31:b4:fd:17: 72:94:51:40:50:09:ed:ef:d5:4e:1c:58:4a:62:8d: ac:37:33:8b:5c:20:7e:9f:5d:f7:ad:60:e6:04:d9: 1d:f0:17:c0:5e:20:9b:ee:ff:9b:1a:45:29:d0:52: 86:41:8c:ac:1e:dc:88:d0:f2:21:4d:9b:fe:94:48: f1:6d:fe:40:d9:b9:f9:ee:73:44:50:76:1a:74:52: b3:cb:c8:e6:a3:f0:3b:3d:0c:c6:59:7f:e6:f2:88: 80:47:3b:3e:b9:9c:92:f6:3b:b5:bc:40:28:b3:e4: dd:d0:fd:4f:37:2e:3b:73:73:65:2b:9a:0b:7f:a1: 64:27:ad:70:15:f9:b5:79:2d:2c:4a:88:d8:36:4b: b8:9a:fd:ef:f0:d7:ef:1e:55:60:ac:df:8e:a2:34: 7c:2c:91:df:b4:43:d0:46:76:cc:5b:32:df:44:ec: 0f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:A5:9D:84:0C:BF:C1:63:FF:BB:2C:ED:BB:D6:C5:11:DE:91:BD:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/cb4b5ee6-bc08-3d60-919a-88f792c7b5e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl X509v3 Authority Key Identifier: keyid:3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer sbgp-ipAddrBlock: critical IPv4: 23.145.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption df:48:db:f7:e8:0f:86:60:1b:79:cd:8d:2a:55:f3:9c:91:58: 96:7b:b9:5e:22:8c:de:33:a1:44:a5:39:51:c8:02:f6:da:74: af:40:66:c8:3c:9b:8c:a6:db:b8:07:bd:d2:80:32:e1:19:22: 47:61:13:d0:88:d6:f8:ba:52:a5:77:f4:84:eb:6c:84:29:1f: c9:e4:44:75:8b:5c:11:a5:cc:26:3f:da:d6:d7:b9:79:ac:4a: 31:ed:af:bd:53:b6:ad:dd:b4:82:e6:dc:11:46:96:5b:4a:36: 52:5d:7b:26:37:a0:ca:33:35:f6:39:35:5d:29:54:9a:14:d7: 22:90:4c:8f:03:5c:f6:10:81:8c:38:9f:04:34:26:e5:20:26: 2d:70:79:15:66:aa:65:10:ce:0b:b5:06:cb:44:2c:64:e8:67: 2a:b2:ad:2e:e2:bb:12:28:83:e9:07:86:a3:19:1e:e3:ca:ac: ef:5f:6e:96:b3:d4:b1:b3:b2:7b:ae:39:6a:6a:f9:fe:36:55: 9f:97:40:5c:cf:52:50:6c:3d:29:a6:80:be:fd:c2:31:e9:67: 2d:b8:19:f5:9b:c7:74:47:62:52:67:06:14:31:81:47:b0:4b: db:79:6f:28:0f:76:bb:1e:87:81:cf:e9:0a:64:a4:fd:58:30: e0:01:f6:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEexAWXNZPzZ34Dez8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWI5YmYyZjQtYzgzMS00ZjFlLWEyZDUtZDdmYzQwNTM1 YzhmMB4XDTI0MTAyODEzMDA0MFoXDTI1MDEyNjE0MDA0MFowLzEtMCsGA1UEAxMk YjM4NTc4M2MtN2IyMi00OTNiLWEwMmUtOTBhYzRhNDkzMTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfKhaNAiHyEnJH0EYgKreOFNWeDw/YUV5sSa gWC/TQ9XgPB0NbPzYvTNFHjVM1T9CJSS8yG3ccS7W2sH3bAL/tuFE+3Sq4KG77rf rAzhdS0VSJxr2zG0/RdylFFAUAnt79VOHFhKYo2sNzOLXCB+n133rWDmBNkd8BfA XiCb7v+bGkUp0FKGQYysHtyI0PIhTZv+lEjxbf5A2bn57nNEUHYadFKzy8jmo/A7 PQzGWX/m8oiARzs+uZyS9ju1vEAos+Td0P1PNy47c3NlK5oLf6FkJ61wFfm1eS0s SojYNku4mv3v8NfvHlVgrN+OojR8LJHftEPQRnbMWzLfROwPWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPelnYQMv8Fj/7ss7bvWxRHekb3YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xYjli ZjJmNC1jODMxLTRmMWUtYTJkNS1kN2ZjNDA1MzVjOGYvY2I0YjVlZTYtYmMwOC0z ZDYwLTkxOWEtODhmNzkyYzdiNWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWI5YmYyZjQtYzgzMS00ZjFlLWEy ZDUtZDdmYzQwNTM1YzhmLzFiOWJmMmY0LWM4MzEtNGYxZS1hMmQ1LWQ3ZmM0MDUz NWM4Zi5jcmwwHwYDVR0jBBgwFoAUPMMWR4yxJu0PqWMpogFuhbqQmokwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xYjliZjJmNC1jODMxLTRmMWUtYTJkNS1kN2Zj NDA1MzVjOGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5GIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN9I2/foD4ZgG3nNjSpV85yRWJZ7uV4ijN4zoUSlOVHIAvbadK9AZsg8 m4ym27gHvdKAMuEZIkdhE9CI1vi6UqV39ITrbIQpH8nkRHWLXBGlzCY/2tbXuXms SjHtr71Ttq3dtILm3BFGlltKNlJdeyY3oMozNfY5NV0pVJoU1yKQTI8DXPYQgYw4 nwQ0JuUgJi1weRVmqmUQzgu1BstELGToZyqyrS7iuxIog+kHhqMZHuPKrO9fbpaz 1LGzsnuuOWpq+f42VZ+XQFzPUlBsPSmmgL79wjHpZy24GfWbx3RHYlJnBhQxgUew S9t5bygPdrseh4HP6QpkpP1YMOAB9v0= -----END CERTIFICATE-----Generated at Thu Nov 21 16:27:09 2024 by rpki-client on console-ams.rpki-client.org